The minimum permission needed to access a file URL from an external stage is USAGE. This permission allows users to reference the stage, which is necessary to access the file URL. MODIFY, READ, and SELECT are all incorrect in this context because they involve modifying data or reading data from internal tables, rather than simply accessing or referencing the stage.